CVE-2008-0805

CVE-2008-0805 affects PHPizabi 0.848b C1 HFP1, where image.php permits unrestricted file uploads. An attacker can upload a file with an executable extension from the event page and access it via system/cache/pictures to achieve remote code execution.

CVE-2008-0805

Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension from the event page, then accessing it via a direct request to the file in system/cache/pictures...

phpizabi-upload.txt

Powered by PHPizabi v0.848b C1 HFP1 remote file upload author: ZoRLu home: www.yildirimordulari.org contact: [email protected] dork: "Powered by PHPizabi v0.848b C1 HFP1" exploit: http://localhost/izabi/system/cache/pictures/idshell.php -first register web site -Create an event on the click an...

PHPizabi 0.848b C1 HFP1 Remote File Upload Vulnerability

No description provided by source. Powered by PHPizabi v0.848b C1 HFP1 remote file upload author: ZoRLu home: www.yildirimordulari.org contact: [email protected] dork: "Powered by PHPizabi v0.848b C1 HFP1" exploit: http://localhost/izabi/system/cache/pictures/idshell.php -first register web si...

PHPizabi 0.848b C1 HFP1 - Arbitrary File Upload

PHPizabi 0.848b C1 HFP1 - Arbitrary File Upload Powered by PHPizabi v0.848b C1 HFP1 remote file upload author: ZoRLu home: www.yildirimordulari.org contact: [email protected] dork: "Powered by PHPizabi v0.848b C1 HFP1" exploit: http://localhost/izabi/system/cache/pictures/idshell.php -first...

PHPizabi 0.848b C1 HFP1 - Arbitrary File Upload

Powered by PHPizabi v0.848b C1 HFP1 remote file upload author: ZoRLu home: www.yildirimordulari.org contact: [email protected] dork: "Powered by PHPizabi v0.848b C1 HFP1" exploit: http://localhost/izabi/system/cache/pictures/idshell.php -first register web site -Create an event on the click an...

PHPizabi 0.848b C1 HFP1 Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================== PHPizabi 0.848b C1 HFP1 Remote File Upload Vulnerability ======================================================== Powered by PHPizabi v0.848b C1 HFP1 remote file upload author: ZoRLu...

Unfixed XSS vulnerability at www.phpizabi.net

Security researcher TweetyCoaster, has submitted on 02/05/2008 a cross-site-scripting XSS vulnerability affecting www.phpizabi.net, which at the time of submission ranked 62864 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/05/2008. It is...